Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0cc15f686b978986095d971e423139be1690c77.cer
File:                     d0cc15f686b978986095d971e423139be1690c77.cer (raw, json)
Hash identifier:          QhDxGj6qph0GEXLwrugyqvo5E8oISD1iTFp20j7Z8mo=
Subject key identifier:   51:76:B8:F9:94:AE:D7:8A:E4:2C:F4:12:02:05:98:E6:22:DF:8F:3F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E287CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d417c303-5cb6-4a1c-a51d-ee3683138ef9/d0cc15f686b978986095d971e423139be1690c77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d417c303-5cb6-4a1c-a51d-ee3683138ef9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:56 +0000
Certificate not after:    Thu 25 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 264648
                          IP: 200.10.164.0/24
                          IP: 2801:170::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14845900 (0xe287cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:56 2017 GMT
            Not After : Apr 25 06:00:00 2024 GMT
        Subject: CN=d0cc15f686b978986095d971e423139be1690c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:bc:3d:ac:53:24:ed:43:fb:93:6e:db:b1:
                    b2:2c:e6:49:d1:3e:7d:d4:f0:e5:b1:5f:cb:ae:74:
                    c7:66:d0:74:79:11:a7:3b:f9:de:10:e1:34:e5:61:
                    ef:1a:ce:b8:9b:13:2c:40:5b:b4:56:e1:6a:7a:44:
                    a9:50:a8:80:6b:76:91:76:01:08:60:58:be:86:b6:
                    c0:25:5e:20:cb:ba:ae:ff:a8:32:04:6e:1e:c2:77:
                    5d:5a:ba:9f:a5:d1:70:b3:ec:d4:5d:d7:04:e9:57:
                    79:f1:ba:d8:09:94:9d:0b:ce:9f:4c:db:21:7d:cf:
                    4e:d1:21:b8:e2:b6:ff:83:0d:dc:7f:df:14:74:13:
                    d1:7e:11:34:9e:80:51:77:de:97:07:09:cc:64:4a:
                    8a:76:bc:61:90:a8:18:fe:e3:e8:d6:d1:7d:6f:bc:
                    d0:71:68:c5:b3:5b:25:8c:33:33:76:94:1f:62:64:
                    62:3d:30:43:7c:4a:ff:e5:bb:f2:ce:2d:b9:fe:ab:
                    da:2b:22:ee:10:86:85:ee:43:06:1b:81:75:7a:7f:
                    d4:af:25:27:4d:b6:36:44:e0:0d:80:9b:6d:64:ba:
                    b2:2e:57:4a:8f:dd:a1:69:6c:7d:4b:dc:81:b2:84:
                    91:b5:3c:7a:23:5f:2a:b2:a2:ae:15:46:81:fc:26:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:76:B8:F9:94:AE:D7:8A:E4:2C:F4:12:02:05:98:E6:22:DF:8F:3F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d417c303-5cb6-4a1c-a51d-ee3683138ef9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d417c303-5cb6-4a1c-a51d-ee3683138ef9/d0cc15f686b978986095d971e423139be1690c77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.164.0/24
                IPv6:
                  2801:170::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264648

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:3f:c4:60:26:1f:12:b1:bc:eb:ec:9c:a7:dc:79:08:5f:
         4e:3e:37:53:96:c5:ed:f1:1c:44:ac:ca:86:33:52:ab:36:58:
         9d:35:04:2b:66:4c:5a:4e:d5:d0:9b:58:c0:e0:2c:7d:4c:91:
         bc:97:b5:e7:88:70:83:14:f5:a5:ae:8f:9c:1a:53:ce:5a:f8:
         11:5c:4c:73:c5:08:af:b6:66:27:fb:cf:9b:82:cf:bf:24:05:
         09:73:89:44:f9:3a:7e:b0:0f:8a:e3:b3:64:af:be:56:2c:77:
         eb:04:19:9c:ef:c9:71:e5:23:6e:19:f7:25:16:a2:84:2c:68:
         b0:97:73:2f:af:79:77:96:27:85:71:0c:95:8f:97:bd:cd:1e:
         09:18:cb:f6:66:ec:56:2d:4a:c5:f3:35:db:1b:a9:f2:e0:fa:
         d5:4c:ce:0b:13:06:00:3a:11:a6:36:5c:56:0e:e5:9b:50:63:
         c0:03:d1:1e:59:9f:be:15:33:cd:af:01:95:02:92:94:2c:ea:
         e0:31:fc:33:59:78:06:ef:ba:b4:a5:40:db:68:f5:67:70:38:
         7a:46:8c:b7:29:34:a8:84:f7:bd:e1:52:02:02:aa:1d:b6:6e:
         57:cc:d1:8e:21:fe:2a:4a:be:b2:b2:94:84:9c:d6:47:41:b6:
         d9:df:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----